000000000 GGGGGGGGGGGG IIIIIIII1 NNN NNN 
LLL 000000000 GGGGGGGGGGGG III NNN NNN 
LLL 000000000 GGGGGGGGGGGG IIIT NNN NNN 
LLL 000 000 GGG II] NNN NNN 
LLL 000 000 GGG IIl NNN NNN 
LLL 000 GGG Il NNN NNN 
LLL 000 000 GGG Ill NNNNNN NNN 
LLL 000 000 GGG II] NNN NN 
LLL 000 000 GGG Ii] NNNNNN NNN 
LLL 000 000 GGG II] NN NNN NNN 
LLL 000 000 GGG II] NNN NNN NNN 
LLL 000 000 GGG III N 
LLL 000 000 GGG 66G6G6GGGG6G II] NNN NNNNNN 
LLL 000 000 GGG 666666666 Il NNN NNNNNN 
LLL 000 000 GGG 666666666 Il NNN NNNNNN 
LLL 000 000 GGG GGG II] NNN NNN 
LLL 000 000 GGG GGG II] NNN NNN 
LLL 000 000 GGG GGG II] NNN NNN 
LLLLLLLLLLLLLLL 000000000 GGGGGGGGG IIIIIIII NNN NNN 
LLLLLLLLLLLLLLL 000000000 GGGGGGGGG IIIIIIII1 NNN NNN 
LLLLLLLLLLLLLL 000000000 GGGGGGGGG IIIT NNN NNN 
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VV VV AA AA LL I] DD DD AA AA TT EE 
VV VV AA AA LL I] DD D AA aA TT EEEEEEEE 
VV VV AA LL I] DD DD AA AA TT EEEEEEEE 
VV VV AAAAAAAAAA LL I] DD DD AAAAAAAAAA TT EE 
Vv V AAAAAAAAAA iL I] DD DD AAAAAAAAAA TT EE 
VV vv AA AA LL II DD DD AA Aa TT EE ee 
vv VY AA AA LL I] DD DD AA Aa TT EE eee 
vv AA AA LLLLLLLLLL IIIIII DDDDDDDD AA AA TT EEEEEEEEEE eee 
ae AA AA LLLLLLLLLL III] DDDDDDDD AA AA TT EEEEEEEEEE . 
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nodule VALIDATE_USER 
title “Ventas ,username and password against UAF' 
asad = *v04 


ig | 
; ‘ 9 senquens (Si 196 )° ; 
; 5 005 addressing_ mode (external: GENERAL)) = ; 
Pot oor 3 esi" | : 
: : R208 : SSR RRR R AREA E RARER ARAAEAAAAAEAE RATER ATER AAEEERAAEREREREEEE EERE : 
; 'e * . 
; 010 1 !* COPYRIGHT (c) 1978, 1980, 1982, 1984 BY * | . 
ow O11 1 i® DIGITAL EQUIPMENT CORPORATION, MAYNARD, MASSACHUSETTS. . ; 
: ig 1¢ | ig ALL RIGHTS RESERVED. . : 
- 0014 1 i THIS SOFTWARE IS FURNISHED UNDER A LICENSE AND MAY BE USED AND copree * | : 
. oe 0015 1 !* ONLY IN ACCORDANCE WITH THE TERMS OF SUCH LICENSE AND WITH THE * : 
:. Baie 1 !@ INCLUSION OF THE ABOVE COPYRIGHT NOTICE. THIS SOFTWARE OR ANY OTHER * | ; 
oe 0017 1 i* COPIES THEREOF MAY NOT BE PROVIDED OR OTHERWISE MADE AVAILABLE TO ANY ®* : 
: 0018 1 !* OTHER PERSON. NO TITLE TO AND OWNERSHIP OF THE SOFTWARE IS HEREBY * : 
3 i ith : ‘* TRANSFERRED. * ; 
Py :* * ° 
3 «(6a 0021 1 !* THE INFORMATION IN THIS SOFTWARE IS SUBJECT TO CHANGE WITHOUT NOTICE * | : 
; $$ 00 ¢ 1 !* AND SHOULD NOT BE CONSTRUED AS A COMMITMENT BY DIGITAL EQUIPMENT * : 
3 $i 4 ? : be CORPORATION. * ; 
3 '® * 3 
; @ $058 1 !* DIGITAL ASSUMES NO RESPONSIBILITY FOR THE USE OR RELIABILITY OF ITS * : 
3 $$ bo5s : ? SOFTWARE ON EQUIPMENT WHICH IS NOT SUPPLIED BY DIGITAL. * 3 
° . * ' P 
; 0028 1 !« . | 3 
: $0 +94 ; Lee RRR RARER EAA AERERAAAAAA AAA ERRATA AERA RERARAREEREERE EEE g 
; 0 3 
: H SB By Mie Sec eat 
3 ! V¥: System Subprogram 3 
et) $033} i , cit | : 
3; #6 0034 1 ! ABSTRACT: 3 
a 0035 1! | 3 
; 36 0036 1! Lookup the supplied username in the authorization file. Validate 3 
; 37 0037 1! the password, and return the record if so, else return the 3 
; 0038 1! default values. | 3 
; FP 0039 1! 3 
; 40 0040 1 ! ENVIRONMENT: : 
s 61 0041 1! | 3 
: $¢ 9h 1 ! AUTHOR: Henry M. Levy , CREATION DATE: 10-Sep-1977 F 
| 0045 1! 5 
: (46 Boe 1 ! MODIFIED BY: | $ 
; 65 045 1! 3 
; 646 0046 1! v03-008 JRLO030 John R. Lawson 20-Jul-1984 14:21 3 
; ‘7 0047 Repaired sloppiness in "LGISSEARCHUSER ; 
> 49 0049 1: V03-007 MHBO157 Mark Bramhall 7=May-1984 | ; 
; 20 Opes : Guard against no global buffers when opening SYSUAF. : 
; 52 0080 1! v03-006 PCG0001 Peter George 31-Jan-1984 19:28 : 
; 33 055 1! Add password number argument to lgi$check_pass. 3 
; e¢ 0035 ! Add access type argument to lgi$searchuser. 

: 6 928 1! v03-005 ACG0385 Andrew C. Goldstein, g?-dec=1963 11:54 

:- 0057 1! Rewrite in BLISS; add support for PURDY_ 


VALIDATE_USER Validate username and password against UAF on3e “19 AX=-11 Bliss-32 V4.0-742 Page 2. 

v04=000 . 1-0-1984 93:23 LOGIN. SRCIVALIDATE 83251 ° af} 

: p28 ! } encryption to support usernames longer than 12 chars. 

; 060 1! v03-004 GAS0165 Gerry Smith 3-Aug-1983 

3 Bogs : } Add $PSLDEF, to get dsisc.. exec. 

; $068 1! V03-003 GAS0164 y Smi 30-Jul-1983 

3 0064 1! Change the FABLFABSB” DSBmSK) kludge to the new 

: BRe? : Logical name disable method, fab$v_lnm_mode. 

3 0067 1! v03-002 TMHOO002 Tim Halvorsen 07-Feb-1983 

; 0068 1! Make password validation return success if the user 

; 0069 1! password is null. This allows specific access control 

3 it : } strings to be matched with accounts with null passwords. 

3 0072 1! v03-001 GAS0057 Gerry Smith 22-Mar-1982 

; 0075 1! Fix FAB to disable all but s byztes logical name 

3 Bebe : bad mF during open of SYSUAF. 

3 0076 1! V02-002 HRJ0031 Herb Jacobs 03-Nov-1981 

3 Bae : } Add a validate password entry point. 

; 0079 1! v001 TMHO001 Tim Halvorsen 09-Mar-1981 

; 0080 1! Enable all authorized orien ions before accessing SYSUAF 

3 0081 1! file and restore current privileges on exit in case 

; 0082 1! the caller doesn't always run with all authorized 

3 0083 1! privileges enabled (i.e. LOGIN). 

3 0084 1 !-- 

; 0085 1 

; 0086 1 

; 0087 1 FORWARD ROUT | 

; 0088 1 LGISVALIDATE, ! validate username and password against UAF | 

3 0089 1 LGISSEARCHUSER, i read user's UAF record 

Hy Boas : LGISCHECK_PASS; i check password against UAF record 

$ 0092 1 LIBRARY 

3 0093 1 *SYSSLIBRARY:LIB' 

; 0094 1 

3 0095 1 

: 0096 1 PSECT CODE = _LIBSCODE (EXECUTE, PIC, SHARE, ALIGN (0)), | 

; 0097 1 PLIT = _LIBSCODE (EXECUTE, PIC, SHARE, ALIGN (0)); 
| 


4 
VALIDATE_USER Validate username and password against UAF ep-1984 02:03:55 AX- 
vos-000 . ° +4 9 


11 
p-1984 12:41:11 LOGIN. 
ASSWORD, P_UAFRECORD) = 


“S$ Bliss-32 V4.0-742 Page 3 
33 SRCIVAL IDATE .B325 1 9 023 
GLOBAL ROUTINE LGISVALIDATE (P_USERNAME, P_P 


lee 


i FUNCTIONAL DESCRIPTION: 


$3 


This routine reads the UAF record for the specified user and 
checks the specified password against it. 


i CALLING SEQUENCE: 
LGISVALIDATE (P_USERNAME, P_PASSWORD. P_UAFRECORD) 


i INPUT PARAMETERS: 
P_USERNAME: address of string descriptor of username 
P_PASSWORD: address of string descriptor of password 


i IMPLICIT INPUTS: 
NONE 


P_UAFRECORD: address of descriptor of buffer into which to read UAF record 
i IMPLICIT OUTPUTS: 
NONE 


' ROUTINE VALUE: 
1 if successful 
-2 if invalid username 
-4 if invalid password 
RMS$_xxx if errors reading the UAF 


i SIDE EFFECTS: 
i NONE 


i 
i 
i 
i 
i 
i 
i 
i 
i 
i 
i 
i 
i 
i 
OUTPUT PARAMETERS: 
i 
i 
i 
i 
i 
i 
i 
i 
i 
i 
i 
i 
i 
i 


BEGIN 
MAP 
P_UAF RECORD : REF SBBLOCK; 
LOCAL : 
STATUS; ' routine return value | 


' Use common subroutines to read the UAF record, and if that succeeds, 
to check the password. 


GISSEARCHUSER (.P_USERNAME, .P_PASSWORD, .P_UAFRECORD); 
HECK PASS (.P_PASSWORD, .P_UAFRECORDLDSC$A_POINTER]) 


STATU 
F 


THEN 
ELSE 


END; ! End of routine LGISVALIDATE 


nn 
rm 
sown 


ATU 
GI$ 
STA 


oO SSesc 
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LOGIN. SRC} VALIDATE .B32;1 (2) | 
TITLE VALIDATE_USER He a A aan and password ag | 


: ainst 
IDENT \V04-000\ 


~PSECT _LIBSCODE,NOWRT, SHR, PIC,0 


| 
0004 00000 ENTRY LGISVALIDATE, Save R2 ; a 
52 0 AC DO 00002 MOVL P_UAFRECORD, R2 : 0147 

5 D 44 PUSHL R2 3 

7E 04 aC D 990 MOV. = P_USERNAME, =(SP) : 

0000v CF Q FB 0000C CALLS #3, LGISSEARCHUSER ; 
0B 9 E9 00011 BLBC STATUS, 1$ : 0148 
04 A2 DD 00014 PUSHL : 0149 

08 AC DD 00017 PUSHL : 

0O00vV CF 02 FB OOO1A CALLS W2 PGISCHECK_PASS ; 
04 OOO1F 1$: RET + 0152 


; Routine Size: 32 bytes, Routine Base: _LIBSCODE + 0000 
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global routine LGISSEARCHUSER 
. — P_PASSWORD, P_UAFRECORD, P_FAB, P_RAB, PASS_LC) = 
egin 
144 
! 
FUNCTIONAL DESCRIPTION: 
This routine reads the UAF record for the specified user. 
' CALLING SEQUENCE: 
LGISSEARCHUSER(P_USERNAME, P_PASSWORD, P_UAFRECORD, P_FAB, P_RAB, PASS_LC) 
' INPUT PARAMETERS: 
P_USERNAME: address of string descriptor of username 
P_PASSWORD: address of string descriptor of password (not used) 
P_FAB: address of FAB to use when — the UAF 
address of RAB to use when connec ~ to the UAF 


“RAB: 
PASS_LC: the presence (regardless of value) of this parameter 
indicates that no case conversion is to be done. 


NSN NNN NNO OOOO OOOOUIVUIVIW CO 
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IMPLICIT INPUTS: 

NONE 
OUTPUT PARAMETERS: 

P_UAFRECORD: address of descriptor of buffer into which to read UAF record 
i IMPLICIT OUTPUTS: 

NONE 
ROUTINE VALUE: 

1 if successful 

hp Cig the UAF 
SIDE EFFECTS: 

NONE 
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builtin 
NULLPARAMETER; 
map 


P_USERNAME: ref S$BBLOCK, 
a erg ref $BBLOCK, 
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AB: ref SBBLOCK, 
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| 


3 10 P_RAB: ref $BBLOCK; 
1 8 11 
14 \ Label 
15 021 
16 0214 READ _UAF ; 
17 0215 
18 0216 Local 
19 0217 
20 0218 STATUS ' Routine status value 
21 0219 PREV _PRIVS: vector(2], ! Saved process privileges 
22 0220 USERNAME _LE ° ' Length of username 
§ USER_NAME: vectorCUAF$S_USERNAME, byte], ! Buffer for username 
FAB: ref $BBLOCK, : Pointer to FAB for the UAF 
2 RAB: ref $BBLOCK, ! Pointer to RAB for the UAF 
22 LOCAL_FAB: SFAB_DECL preset(CFABS$W_IFIJ = 0), ! FAB to open UAF 
$$ LOCAL_RAB: $RAB_DECL preset(CRAB$W_ISIJ = 0); ! RAB to read record 
$§ bind 
$5 SYSPRV = blaltgetay athe ee tig: SYSPRV)), 0), 
$3 DEFAULT_USER = uplit byte('DEFAOLT'); 
23 ! 
$3 Prepare to access UAF through FAB and RAB 
23 
23 READ_UAF : 
begin 


i Which FAB and RAB should we use? 


if NULLPARAMETER(4) then 
begin 


i 
FAB = LOCAL_FAB; 
RAB = LOCAL_RAB; 

end 

a 

begin 
FAB = .P_FAB; 
RAB = .P_RAB; 

end; 


PWN OC ODNAUSWN (OOD NAUESWN OO OONOULS WA 


: Is the UAF already open? 


if .FABCFABSW_IFI] eql 0 then 
begin 


| 

P SFAB_INIT(fab = .FAB, | 

P 02 fnm = ‘SYSUAF' 

P drm = 'SYSSSYSTEM:.DAT’, | 
P fac = (GET, UPD), 

shr = (GET, PUT, UPD, DEL)); | 
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69 RABLRABSW_ISI] = 0; 
20 FABLFABSV-LNM_MODE) = PSLS$C_EXEC; 
re p SSETPRV(enbflg = 1, 
7 P prvadr = SYSP 
prvprv = PREV RPRIVS): 


Open the UAF. If errors indicate problems with file sharing, try opening 

it non-shared. 
| 
| 


STATUS = SOPEN(fab = .FAB); 


if .STATUS eql RMS$_SNE 
or .STATUS eql RMS$~SPE 
or ob be eql RMS$_DME then 
oF ABLFABSB_SHR] = 0: 
gStATus = $e SOE Ta b= .FAB); 
end; 


if not .STATUS then 
leave READ_UAF ; 


OVO ONANEWN —"OOONOUS 
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end; 

Is the current RAB connected to the UAF? 
if .RABCRAB$W_ISI] eql 0 then 

begin 


SRAB_INIT(rab = .RAB, 
fab 


rac Y,. 
rop (NLK, WAT)); 


STATUS = SCONNECT(rab = .RAB); 
if sSTATUS eql RMS$_CRMP then 
oF ABLFABSW_GBC] = 0: 
“" ATUS = SCONNECT(rab = -RAB); 
end; 


if not .STATUS then 
leave READ_UAF; 


WN 
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end; 
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: Attach key and buffer to RAB 
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RABCRAB$W_USZ) = .P_UAFRECORDCDSC$W_LENGTH); 
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: 6 0324 RABCRABSL_UBF] = arb SERNaRES POINTER]; | 
3 7 0325 RABLRAB$B_KSZ] = UAF NAME; 

: : 8 § RABLRABSL_KBF) = USER_ § 

: 330 03 8 3! 

: H 03 , Upcase and blank fill the username string | 
: 33 0331 3 

; 334 O33¢ ; USERNAME_LENGTH = .P_USERNAMECDSC$W_LENGTH); 

: 336 0334 3 incr J to .USERNAME_LENGTH-1 do | 
° egin 

: 3% ae ° 

:; 339 0337 4 Local 
; 340 0338 4 C: byte; 

: 341 0339 4 | 
: a6 te ; C = .vector£.P_USERNAMECDSCSA_POINTER), .J:, byted; 

: 344 0542 4 if .C eql ' " th 

; er tak : exitloop (USERNAME LENGTH = .J); 

: 347 0345 4 if not NULLPARAMETER 6) 
Ps an 
; 349 0347 4 and . ¢ eau *2 *2" then 
: $20 tk ? tet user. AMEC.JJ = .C = 32 
: 35¢ 0350 4 SSER_NANEL. J = .¢ 

: 354 O35¢ 3 end; 
5 wae 0353 3 
; 328 0334 3 ch$fill(* ', UAFSS_USERNAME=.USERNAME LENGTH, USER_NAMEL.USERNAME_LENGTH]); 

: 358 0356 3! 

; sap Beer H Read the UAF record. If not present, read the default record instead. 

: 361 0359 3 

; 308 B300 ; STATUS = $GET(rab = .RAB); 

: 364 036¢ ; if gSTATUS eql RMS$_RNF then 

: 366 0364 4 eOUSERNAME_LENGTH = 7; 

: 367 0365 4 chScopy (7, D DEFAULT _USER, * ", UAFSS_USERNAME, USER_NAME); 

; 368 0366 4 (rab = .RAB);: 

3 b3e8 = -SiATus. then 

: 371 0369 end; ; 

; 37 0370 

i 0371 3! 

; e Ba76 : Check for username = DEFAULT, and return failure if so. 

: 376 0374 3 

3 77 0375 if .STATU 

; 4 | Be78 and “chtegt (us USERNAME LENGTH, USER_NAME, 7, DEFAULT_USER, * ') then 

: 380 Eee 

; 4 tie end; ! end of block READ_UAF 
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00 14-Sep-1984 12:41:11 LOGIN. SRC VALIDATES 1553. 1 (3) 
s 3S 1 ! 
3 Re B Close the UAF (if necessary) and restore the caller's privileges. 
: 386 84 
: 387 0 89 if NULLPARAMETER(4) then 
; 388 0 $ begin 
: 389 038 SDISCONNECT (rab = .RAB); 
: 390 0388 SCLOSE(fab = .FAB): 
: 393 0390 a | 
; 39 0391 SSETPRV(enbflg = 0, prvadr = uplit(0, 0)); 
> 394 039¢ SSETPRV(enbflg = 1, prvadr = PREV_PRIVS); | 
; 395 2039 
3 96 0394 return .STATUS 
: 397 0395 | 
; 398 0396 1 end; ! End of routine LGISSEARCHUSER 
| 
00# 00020 P.AAA: .BYTE O0[2] : 
0900 00022 . WORD : 
00# 00024 P.AAB: .BYTE 0[2] : 
0000 00026 .WORD 0 : 
00000000 10000000 900¢8 P.AAC: .LONG 268435456, 0 : 
54 4C 55 41 46 45 44 00030 P.AAD: ASCII \DEFAULT\ : 
46 41 55 53 59 53 00037 P.AAE: ASCII \SYSUAF\ F 
54 41 44 2— 3A 4D 45 54 53 59 53 24 53 59 53 0003D P.AAF: ASCII \SYSS$SYSTEM:.DAT\ : | 
00000000 00000000 0004C P.AAG: .LONG 0, 0 : 
SYSPR P.AAC | 
DEPAULT _USER= P.AAD 
“.EXTRN SYSS$SETPRV SYSSOPEN 
TEXTRN SYSSCONNECT $GET 
TEXTRN SySSDISCONNECT. SSVESCLOSE 
OFFC 00000 -ENTRY LGISSEARCHUSER, Save R2,R3,R4,R5,R6,R7.R8,- ; 0154 
5B 000000006 00 9€ 00002 MOVAB CVSSsETPRV R11 : 
SA DO AF 9E 00009 MOVAB DEFAULT_USER, R10 : 
5E FF44 CE 9€E 0000D MOVAB =-188(SPY, SP : 
FO AA re 04 2¢ 90012 MOVCS #4, P.AAA, #0, #80, LOCAL_FAB 3 0224 
FS sOAA 04 2c 0001¢ MOVCS #4, P.AAB, #0, #68, LOCAL_RAB : 0225 
04 6c 91 $00 5 CMPB (AP), #4 > 0243 
0S iF 990 8 BLSSU : 
10 AC DS OO02A TSTL 16 (AP) 3 
09 12 00020 BNEQ $ : 
57 44 AE 9E 99 F 1$: MOVAB LOCAL_FAB, FAB : 0245 
58 6 9 0033 MOVAB LOCAL"RAB, RAB > 0246 
04 11 000 BRB 3$ 3 9 43 | 
57 10 AC 7D 000 33: MOva FAB, FAB ; 0250 
02 A? B5 905¢ $: TSTW Str ABS ; 0258 | 
76 12 0003F BNEQ 3 
AS 00 2¢ 9041 MOVCS 2. (SP), #0, #80, (FAB) > 0265 | 
67 5003 $F B0 $029 MOV) #20483, (FAB) : 
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16 A? OFOA 8F 004E MOVW #3850, 22(FAB) : 
1F OA 2 86 O94 MOVB = #2, 9 Pass : | 
C A? 07 AA 9E 00058 MOVAB P.AAE, 44(FAB) ; 
0 A? D AA 3 05D MOVAB P.AAF, 48 (FAB) : 
4 ar 0F 06 8F B 0064 MOVW #3846, 52(FAB) : | 
02 As B4 06 CLRW = 2(RABS > 0267 | 
4A A? 02 00 01 FO O68 INSV #1, #0, #2, 74(FAB) + 0268 | 
FB AD 9F 00071 PUSHAB PREV _PRIVS : 0272 | 
7E D4 00074 CLRL  =(SPY : 
F8 AA 9F 00076 PUSHAB SYSPRV : 
01 DD 00079 PUSHL #1 : 
68 04 FB 00078 CALLS #4, SYS$SETPRV : 
7 DD 0007E PUSHL FA t 0279 
000000006 00 01 FB 0080 CALLS #1, SYSSOPEN : 
59 50 D 90087 MOVL 0; STATUS : 
0001879C BF 28 D 008A CPL STATUS, #100252 + 0281 
000187A4 BF 59 Di 00093 CMPL = STATUS, #100260 + 0282 
09 13 OOO9A BEQL «= 4 : 
000184D4 BF 59 Di 0009¢ CMPL STATUS, #99540 + 0283 
OF 12 O00A3 BNEQ 5$ : 
17 AZ 94 OOOAS 4$: CLRB =: 23 (FAB) : 0285 
57 DD 0008 PUSHL FAB : 0286 
000000006 00 01 FB OOOAA CALLS #1, SYSSOPEN : 
59 50 00 00081 MOVL RO, STATUS ; 
46 59 £9 00084 5$ BLBC STATUS, 7$ + 0289 
02 A8 B85 000B7 6$ TSTW  2(RAB) : 0298 | 
47 12 OOOBA BNEQ &8$ : 
0044 28F 00 6E 00 2c 9008¢ MOVCS #0, (SP), #0, #68, (RAB) > 0304 
68 4401 8F BO 000C4 MOVW #17409, (RAB) : 
04 a8 00120000 8F 00 000C9 MOVL #1179648, 4(RAB) : 
1—E AB 01 90 00001 MOVE #1, 30(RAB) : 
3C A 57 DO 00005 MOVL FAB, 60(RAB) : 
58 DD 00009 PUSHL RAB : 0306 
000000006 00 01 FB 000DB CALLS #1, SYSS$CONNECT : 
59 50 D0 000E2 MOVL RO, STATUS ; 
0001C14C BF 59 D1 000ES CMPL = STATUS, #115020 : 0308 
OF 12 OO0EC BNE : 
48 AZ? B4 OOOEE CLRW  72(FAB) : 0310 
58 DD O00F1 PUSHL RAB > 0311 
000000006 00 gi FB OOOF3 CALLS #1, SYSS$CONNECT ; 
59 0 DO OOOFA MOVL RO. STATU : 
03 59 eS OO0FD 7$ BLBS STATUS, : 0314, 
00A8 31 00100 BRW 15$ : 
50 Oc ac dO $0183 8$ MOVL Pp WAFRECORD. RO 3 0323 | 
20 As 60 BO 00107 MOVW = (RO) (RAB) F 
¢ AB 04 AO b0 9108 MOVL  4(ROS, 36(RAB) : 0324 
4 As 20 110 MOVE #32, 52(PAB) : 0 5 | 
AB D8 AD 9E 00114 MOVAB USER_NAME, 48(RAB) : 0326 
56 04 C 3¢ 00119 MOVZWL @P_USERNAME, USERNAME_LENGTH 3 0332 | 
50 6 00 00110 MOVL USERNAME LENGTH, RO > 0334 | 
51 04 AC D0 00120 MOVL P_USERNAME, R1 : 0340 | 
53 01 cE 0124 MNEGL : 
¢ 11 00127 BRB 2 ; 
52 04 B143 90 00129 98: MOVB a4 (R1)CU), C ; 
2 52 91 OO12E CMPB CC, «#32 > 0342 | 


— — —EEE : ‘“ | 
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04-000 ’ 1ensee=13he FSi8F:77 HAAG HA Bh iges3e Nee 05%$2. ve dy) 
1 1 | BNEQ 108 : 
56 : ROVL dg USERNAME _LENGTH + 0343 
06 § 91 00138 108 CMPB sé AP), #6 + 0345. 
19 1f 00138 BLSSU -'11$ : 
18 «AC 03 130 TSTL ¢4 (AP) : 
14 1 149 BEQL 1$ : | 
61 BF 52 91 0014 CMPBOC,:«#97 + 0346. 
Q 1F O46 BLSSU. 11S 3 
7A soBF 91 0014 CMPB CC, -#122 + 0347 
1A 0014C BGTRY i$ : | 
DB AD43 52 85 a8 $UBB #32, C, USER_NAMELJ] : 0348) 
D8 apa 2 9 136 11$: MOVB  C, USER_NAMECJJ + 0350 
CA 5 50 F2 00158 1¢8: AOBL §S rb, J + 0334 
50 20 56 ¢ 015F 13$:  SUBL USERNAME LENGTH #32, RO + 0354 
50 20 bE 00 2 00163 movcS #0, (SP)> #32, RO, USER_NAME- ; 
DB AD46 0016 CUSERNAME_LENGTH] : 
58 oD 00168 PUSHL RAB + 0360 
000000006 90 01 FB 0016D CALLS #1, SYS$GET 3 
9 50 DO 00174 MOVL é TUS ; 
00018282 BF 59 D1 00177 CMPL STATUS, #98994 > 0362 
iC if 0017€ BNEG : 
56 07 DO 00180 MOVL #7, USERNAME _LENGTH + 0364 
20 20 6A on 0? 2c ott MOVCS #7, DEFAULT_OSER, #32, #32, USER_NAME ; 0365 
58 DD 0018A PUSHL RAB : 0366 
000000006 00 01 FB 0018¢ CALLS #1, SYSSGET ; 
59 50 DO 0019 MOVL . US : 
12 59 £9 00196 LBC STATUS, 15$ : 0367 
59 02 CE 00199 MNEGL #2, STA : 0368 
0c 59 E9 0019C 14$:  BLBC. STATUS, 15$ > 0375 
07 20 D8 AD 56 2D 0019F CMPCS USERNAME LENGTH, USER_NAME, #32, #7, - : 0376 
6A 001A5 DEFAULT_OSER $ 
03 12 0016 BNEQ : 
59 02 CE 001A8 MNEGL #2, STATUS : 0377 
04 6c 91 OO1AB 15$ CMPB. s(AP), #4 > 0385 
05 1F OO1AE BLSSU ; 
10 AC DS 00180 TSTL 16 (AP) : | 
1¢ 12 0018 BNEQ 17% ; 
58 DD 00185 16$: | PUSHL RAB : 0387 
000000006 00 g1 FB 00187 CALLS #1, SYSS$DISCONNECT ; 
000000006 00 i 3 Ooteg CALLS #1, SYSSCLOSE ene 
oH 7¢ ith 17$: CLRO 0 _ = (§P) : 0391 
1¢ AA OF doi¢9 PUSHAB P.AAG ; 
68 fe Oe Soree Leet pe SYSSSETPRY : 
. rh $0164 (LRG : 0392. 
F8 AD OF 00103 PUSHAB PREV_PRIVS ; 
1 DD 0106 PUSHL #1 : 
68 4 FB 01D CALLS #4, SYSS$SETPRV ; | 
50 9 DO 001DB MOVL STATUS, R 3 0394 | 
04 001DE RET ; 0396 | 
; Routine Size: 479 bytes, Routine Base: _LIBSCODE + 0054 


WS a te 1-§88-188 PRET UCGSIN. BAUS HAC TONES SS? 


; 399 0397 1 
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GLOBAL ROUTINE LGISCHECK_PASS (P_PASSWORD, UAF_RECORD, PWD_NUMBER) = 


FUNCTIONAL DESCRIPTION: 
This routine reads the UAF record for the specified user. 


! CALLING SEQUENCE: 
LGISCHECK_PASS (P_PASSWORD, UAF_RECORD) 
INPUT PARAMETERS: 
P PASSWORD: address of string descriptor of password 
UAF_LRECORD: address of UAF record 
PWD NUMBER: password number, 0 - primary, 1 - secondary 


IMPLICIT INPUTS: 
NONE 

OUTPUT PARAMETERS: 
NONE 

IMPLICIT OUTPUTS: 
NONE 


ROUTINE VALUE: 
if successful 
-4 if invalid password 


SIDE EFFECTS: 
NONE 


BEGIN 
MAP 
P_PASSWORD : REF $BBLOCK, 
UAF_RECORD : REF $BBLOCK; 
LITERAL 
MAX_PASSWORD = 80; ! maximum password accepted 
LOCAL 
PASSWORD_LENGTH, ! Length of password string 
PASSWORD : VECTOR CMAX_PASSWORD, BYTE), ! password string buffer 
PASSWORD_DESC VECTOR » | password string descriptor 
USERNAME DESC VECTOR - | username string descriptor 
ENCRYPT_6UF : VECTOR . | buffer for encrypted password 
ENCRYPT_DESC : VECTOR ;  ! descriptor for above 
EXTERNAL ROUTINE 
LGISHPWD; ! encrypt password 


SASSUME (SBYTEOFFSET (uaf$q_pwd2), gol. SBYTEOFFSET (uaf$q_pwd)+8); 
SASSUME (SBYTEOFFSET (u e 1 € 


a 
af$b_encrypt QL, SBYTEOFFSET (uaf$b_encrypt)+1); 
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Upcase and length check the password string. 


PAS SWORD LENGTH = MINU (.P_PASSWORDCDSCS$SW_LENGTH], MAX_PASSWORD); 
INCR J FROM 0 TO .PASSWORD™ “LENGTH 


BEGIN 
LOCAL ¢ 

xy eight "EE EE _PASSWORDCDSCSA_POINTER], .J; BYTE; 
AND .C 

THEN ‘5st lbof J} = C= 32 

ELSE PASSWORD .C; 


! Set up username and password string descriptors. Note the epee ptton 
! algorithm determines the format of username used = the old URD 

! algorithm uses a 12 character blank-filled username, while the new 
version uses a variable trimmed username. 


C 
C 
C 
C 


ENCRYPT _DE 
ENCRYPT_DE 
_D 


PASSWORD 
PASSWORD_D 


USERNAME _DE } = 12; 
USERNAME _DES = UAE _RECORDCUAFST_USERNAME); 


A CUAF_LRECORDCUAFSB_ENCRYPT], .PWO_NUMBER; ,BYTE] NEQ UAFS$C_PURDY 


= 8; 
= ENCRYPT_BUF ; 


= .PASSWORD_LENGTH; 


SC 
sc 
ESCCO] 
ESCL1] = PASSWORD; 
ScCOJ 
J 


BEGIN 

BUILTIN LOCC, RO: 
(ZREF (* *)) XREF (UAFSS USERNAME), UAF_RECORDCUAFST_USERNAME J) ; 

USERNAME DESCCO]’= UAFSS-USERNARE = “RO; 


Finally encrypt the password and check it. 


LGISHPWD (ENCRYPT DE DESC 
VECTOR Cust RECORD CUAF SB _ENCRYPT], .PWO_NUMBER; ,BYTE), 
wnt aye LT), 
USERRARE. _DESC 


IF CHSEQL (8, ENCRYPT_BUF 
on 9 UAF$S _PWD,~ UAF “RECORDCUAF $Q_ PWD] + (.PWD NUMBER * 8)) 


ELSE =-4 
END; ! End of routine LGISCHECK_PASS 


-EXTRN LGISHPWD 
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VALIDATE_USER Validate username and password against UAF 16-Sep-1984 02:03:55 AX-11 Bliss-32 V4.0-742 Page 15. 
v06 ° a aets 1 95:08:32 LOGIN. SRCIVAL IDATE B32 1 ° (4) 
000¢ 000 .ENTRY LGISCHECK_PASS, Save R2,R3 : 0398 
5 oR ee Tn ss 
0050 8F 6 81 0000 CHP ROT BO ; | 
4 18 F BLEQU ; 
59 50 BF 9A 00011 MOVZBL #80, RO ; | 
0 dO 13 1$: MOVL RO, PASSWORD_LENGTH : | 
31 04 AC 00 091 MOVL P_PASSWORD, Ri + 0463 
0 01 cE 001C MNEGL #7, J F 
1€ 11 OOO1F BRB ; 
52 04 B14 30 00 1 2$: MOVB a4(R1)CJ), C ; 
61 BF 52 9 6 CMPB #97 + 0464 
9 1F 0O02A BLSSU : 
7A —soBF 3 1 00 CHPB #122 + 0465 
20 AE4O 52 20 83 90 suBes #32, C, PASSWORDCJJ + 0466 
20 AESO 2¢ 99 00 A 3S: MOVB CC, PASSWORDCLJ) + 0467 
DE 50 53 FS OO03F 4S: AOBLEQ PASSWORD LENGTH, J, 2$ + 0459 
bE 08 pd 00043 MOVL #8, ENCRYPT_DES + 0476 
04 «AE 08 AE i 0046 MOVAB ENCRYPT BUF. ENCRYPT_DESC+4 : 0477 
18 AE 53 00 00048 MOVL PASSWORB_LENGTH, PASSWORD_DESC : 0479 
1c AE 20 AE 9E 0004F MOVAB PASSWORD PASSWORD_DESC+4 + 0480 
10 A OC DO 00054 MOVL #12, USERNAME _DESC > 048 
5 08 ac 00 00058 MOVL _- UAF_RECORD > 048 
“ 4k 06 =A 3 0 05¢ MOVAB 4(R3), USERNAME_DESC+4 ; 
5 Oc aC DO 00061 MOVL PWD NUMBER R2 + 0485 
01 0168 C243 91 00065 CMPB 360TR2)CR34, #1 : 
OA 13 00068 BEQL ; 
04 Ad 0 0 3A 9006p LOCC. = #32, #32, 4(R3) + 0489 
10 AE 0 0 ¢3 000 g SUBL3. RO, #32, USERNAME DESC + 0490 
10 AE 9F 00077 S$: PUSHAB : RNAME _DESC + 0496 
7E 0166 C3 3C OOO7A MOVZWL (R3), =(SP) + 0499 
7E 0168 C243 9A O007F MOVZBL 360(R2)(R3), -(SP) : 0498 
24 AE 9F 00085 PUSHAB PASSWORD DESC : 0496 
10 AE 9F 00088 PUSHAB ENCRYPT_BESC ; 
000000006 00 05 FB 000 CALLS #5 LG1SHPUD : 
0154 C342 7F 0009 PUSHAQ 346(R3)(R2) : 0502 
9E Oc AE 08 29 0009 CMPC3 #8, ENCRYPT_BUF, a(SP)+ 3 \ 
04 if 009C BNEQ ; 
50 01 D0 0009E MOVL #1, RO : | 
50 04 CE QOOA? 6S MNEGL #4, RO >; 0505 : 
65 Soo RET + 0507 
| 
| 
| 
i 
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VALIDATE_USER Validate username and password against UAF 18-Sep-1984 96103! 93 VAX=11 Bliss-32 V4.0-742 Page 16) 
v04-000 14-Sep-1984 12:41:11 CLOGIN. SRCJVALIDATE.832;1 (4) 
| 
; PSECT SUMMARY 
: Name Bytes Attributes 
: _LIBSCODE 729 NOVEC,NOWRT, RD, EXE, SHR, LCL, REL, CON, PIC,ALIGN(O) 
| 
$ Library Statistics | 
By .. 6 ho ee i nes og ee, nee Symbols -------- Pages Processing 1 
: File Total Loaded Percent Mapped Time | 
: -$255$DUA28: CSYSLIBILIB.L32;1 18619 101 0 1000 00:01.3 | Ll 
| Ll 
LI 
Ll 
Ll 
| LI! 
: COMMAND QUALIFIERS ” 
; BLISS/CHECK=(FIELD, INITIAL,OPTIMIZE)/LIS=LIS$:VALIDATE/OBJ=OBJ$: VALIDATE MSRC$:VALIDATE/UPDATE=(ENH$: VALIDATE) LO 
; Size: 677 code + 52 data bytes 
; Run Time: 00:11.9 


; Elapsed Time: 00:54.0 
3 Lines/CPU Min: 6208 

3; Lexemes/CPU-Min: 37689 

: aenery Used: 207 pages 
3 3 


; Compilation Complete 


AH-BT13A-SE 
VAX/VMS_V4_.0 


PMENT CORPORATION 


223 


